docs: note plan pipeline doubles as encapi conformance check #7

Closed
unkin-agent wants to merge 1 commits from benvin/validate-encapi-plan into main
+3
View File
@@ -58,3 +58,6 @@ to Vault via kubernetes auth (`terraform-enc` ServiceAccount). Locally:
make plan # approle auth by default (needs env with VAULT_ROLEID)
make apply
```
The plan pipeline doubles as a live conformance check of the encapi API: a
no-op plan proves the deployed encapi still serves reads correctly.